top of page
log-sidrah-art-white.png

Privacy policy

1. Data Controller & Contact Information

The data controller under the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG) is:
Sidrah Hakim

[Your Address]
wrigglingwormstudio@gmail.com

For data protection inquiries, contact me at: wrigglingwormstudio@gmail.com

2. Types of Data Processed

a) Automatically Collected Data (Server Logs)

When you visit this website, the server automatically logs:

  • Your IP address

  • Browser type and version

  • Operating system

  • Referrer URL (the page you came from)

  • Timestamp of access

This data is processed to ensure website security and is deleted after 7 days, unless required for legal investigations.

b) Google Analytics

This website uses Google Analytics (provided by Google Ireland Limited) to analyze user behavior. Google Analytics uses cookies to track:

  • Pages visited

  • Session duration

  • Device type (desktop/mobile)

  • Approximate location (country/city)

​

Legal Basis: Your consent (Art. 6(1)(a) GDPR). You may withdraw consent anytime via cookie settings.

Data Processing Measures:

  • IP anonymization: Your IP address is truncated before storage.

  • Data Retention: 14 months.

  • Data Sharing: Google acts as a processor under a Data Processing Agreement (DPA).

Opt-Out:

  • Disable cookies in your browser.

  • Install the Google Analytics Opt-Out Browser Add-on.

c) Cookies

This website uses necessary cookies (for functionality) and analytics cookies (with consent). You can manage cookies in your browser settings.

d) Contact Forms

If you contact me via email or a form, I process:

  • Your name

  • Email address

  • Message content
    This data is used solely to respond and is deleted when no longer needed.

3. Purposes & Legal Bases for Processing

Your data is processed for:

  • Contractual obligations (e.g., responding to inquiries) – Art. 6(1)(b) GDPR.

  • Legitimate interests (e.g., website security, analytics) – Art. 6(1)(f) GDPR.

  • Legal compliance (e.g., tax records) – Art. 6(1)(c) GDPR.

  • Consent-based marketing (e.g., newsletters) – Art. 6(1)(a) GDPR.

4. Data Recipients

Your data may be shared with:

  • Google Analytics (anonymized).

  • Hosting providers (necessary for website operation).

  • Legal authorities (if required by law).

No data is sold to third parties.

5. International Data Transfers

Google Analytics may transfer data to the U.S. under EU Standard Contractual Clauses (SCCs).

6. Data Retention

  • Server logs: 7 days.

  • Contact form data: Until the inquiry is resolved.

  • Google Analytics: 14 months.

7. Your Rights Under GDPR

  • You have the right to:

  • Access your data (Art. 15 GDPR).

  • Correct inaccurate data (Art. 16 GDPR).

  • Delete your data (Art. 17 GDPR).

  • Restrict processing (Art. 18 GDPR).

  • Data portability (Art. 20 GDPR).

  • Withdraw consent (Art. 7(3) GDPR).

  • Lodge a complaint with a German supervisory authority.

  • To exercise these rights, contact me at [Your Email].

8. Links to Third-Party Sites

  • This website may link to external sites. I am not responsible for their content or privacy practices.

9. Children’s Privacy

This website is not intended for users under 16. If I become aware of data collected from a minor without parental consent, it will be deleted.

10. Data Security

I implement SSL encryption and technical safeguards to protect your data. However, no internet transmission is 100% secure.

11. Changes to This Policy

I may update this policy. Changes will be posted here with a revised "Last Updated" date.

12. Cookie Policy

This website uses:

  • Necessary cookies (for functionality).

  • Analytics cookies (with consent).

You can disable cookies in your browser, but some features may not work.

Contact

For questions, email: wrigglingwormstudio@gmail.com.

bottom of page